$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd2b58a0-834f-3f49-a584-add18f708880.roa File: bd2b58a0-834f-3f49-a584-add18f708880.roa (raw, json) Hash identifier: oh+sTYrBzVNphrJex9wKeT1SppB27zeI4FoVUBslvbQ= Subject key identifier: 55:B0:0F:E3:66:B9:50:3C:80:61:74:84:11:90:84:39:5E:5B:05:A3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D59EAB5CFC2D9F4E517B36A40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd2b58a0-834f-3f49-a584-add18f708880.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 834 IP address blocks: 209.101.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b5:cf:c2:d9:f4:e5:17:b3:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=597299f6-852c-438f-9f4a-ba3b1bbc2747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:c0:4d:a6:05:a3:92:19:37:97:86:16:e7: 95:59:6f:50:2f:dd:4d:21:fe:f4:17:a3:68:f2:02: 8d:c9:d7:25:f3:8c:10:7c:49:a2:f2:8a:57:1e:c1: a8:5e:ff:ee:d0:ab:a8:6a:2f:6b:39:ba:22:89:07: 16:67:b5:5d:b0:c4:5e:5a:28:b4:14:d6:b5:87:0c: 1a:9c:b2:ac:5c:22:b2:b8:3b:de:98:cc:66:20:0e: 86:b2:b5:02:11:5b:88:33:4e:10:73:94:69:df:64: d5:14:ff:0b:3d:dc:5f:41:5e:7e:42:1a:a2:14:35: 39:4b:9b:d3:60:4f:40:18:ed:a7:1a:8e:b7:ce:08: 5d:ca:b3:2c:eb:ce:4f:05:a0:01:cc:d9:06:c9:16: f9:7a:3e:dd:78:88:f6:82:18:8f:f3:bc:04:97:d9: 50:a0:87:c7:82:61:f8:f9:ae:21:d6:23:03:6c:6a: 92:12:00:2b:f6:0a:80:57:20:58:c8:22:fd:64:a4: c5:fb:88:f5:c7:f9:b1:75:ec:1f:3c:e0:b6:12:03: ff:89:4e:50:c5:98:f5:58:c2:e7:9b:6f:a6:8b:92: 77:ba:e8:20:71:62:a4:fb:36:40:be:61:00:af:66: 73:e3:16:8b:55:27:07:12:40:ad:8c:d4:a4:d3:65: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B0:0F:E3:66:B9:50:3C:80:61:74:84:11:90:84:39:5E:5B:05:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd2b58a0-834f-3f49-a584-add18f708880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d3:c4:fe:16:c8:a0:03:57:67:0d:7d:70:f5:50:4b:d2:a4: 2d:45:4f:50:f6:25:bb:c4:ef:05:c1:66:2a:6c:63:dd:a7:e9: cb:d0:95:4e:4b:ab:b9:22:0d:a7:49:22:39:ae:e1:80:f5:c5: d1:eb:35:bc:1b:14:f8:f3:74:e4:f2:40:cd:07:91:cd:3b:f3: cc:f8:df:27:8d:01:17:eb:27:fd:97:a6:ef:45:3e:9b:7f:b8: 36:eb:20:13:ba:70:e1:e9:5f:9a:be:fd:3e:b2:8b:d5:e5:e1: de:fc:c4:1f:30:a5:aa:b3:99:b4:1c:42:34:8f:be:89:4d:a0: 41:6b:2f:61:08:24:bc:70:03:98:8b:a8:2e:c2:c0:1c:f6:ba: 0b:80:27:89:15:c4:0b:6e:5b:5c:0b:5d:26:e1:83:09:38:c4: 23:32:ae:5a:0c:9a:62:22:4d:5e:d6:d6:ea:08:1b:f4:5e:af: 85:87:e0:7c:28:72:dd:f7:d3:4b:9e:ae:b4:3a:2b:92:00:08: b2:c5:15:31:61:4f:18:84:b7:7f:8e:34:8a:fd:34:59:5b:c6: b0:f8:f3:63:42:13:f7:6c:20:98:58:54:b4:d0:53:8b:8e:67: 18:e6:3b:b7:5f:6a:67:33:07:80:5f:ef:e9:02:6b:e6:7b:13: dc:e8:5b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6rXPwtn05RezakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NTk3Mjk5ZjYtODUyYy00MzhmLTlmNGEtYmEzYjFiYmMyNzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukLATaYFo5IZN5eGFueVWW9QL91NIf70F6No 8gKNydcl84wQfEmi8opXHsGoXv/u0Kuoai9rOboiiQcWZ7VdsMReWii0FNa1hwwa nLKsXCKyuDvemMxmIA6GsrUCEVuIM04Qc5Rp32TVFP8LPdxfQV5+QhqiFDU5S5vT YE9AGO2nGo63zghdyrMs685PBaABzNkGyRb5ej7deIj2ghiP87wEl9lQoIfHgmH4 +a4h1iMDbGqSEgAr9gqAVyBYyCL9ZKTF+4j1x/mxdewfPOC2EgP/iU5QxZj1WMLn m2+mi5J3uuggcWKk+zZAvmEAr2Zz4xaLVScHEkCtjNSk02XcKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWwD+NmuVA8gGF0hBGQhDleWwWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmQyYjU4YTAtODM0Zi0z ZjQ5LWE1ODQtYWRkMThmNzA4ODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7TxP4WyKADV2cNfXD1UEvSpC1FT1D2JbvE7wXBZipsY92n6cvQlU5L q7kiDadJIjmu4YD1xdHrNbwbFPjzdOTyQM0Hkc0788z43yeNARfrJ/2Xpu9FPpt/ uDbrIBO6cOHpX5q+/T6yi9Xl4d78xB8wpaqzmbQcQjSPvolNoEFrL2EIJLxwA5iL qC7CwBz2uguAJ4kVxAtuW1wLXSbhgwk4xCMyrloMmmIiTV7W1uoIG/Rer4WH4Hwo ct3300uerrQ6K5IACLLFFTFhTxiEt3+ONIr9NFlbxrD482NCE/dsIJhYVLTQU4uO ZxjmO7dfamczB4Bf7+kCa+Z7E9zoW5A= -----END CERTIFICATE-----Generated at Fri Apr 10 23:17:08 2026 by rpki-client